Lemon Duck malware isn't done harassing Windows and Linux, it's evolving - Windows Central

We may earn a commission for purchases using our links.

It then began a transition into being a malware loader, which brings us to the latest update from Microsoft on the state of the malicious, citrus-infused digital duck.

"Today, beyond using resources for its traditional bot and mining activities, LemonDuck steals credentials, removes security controls, spreads via emails, moves laterally, and ultimately drops more tools for human-operated activity," Microsoft's security report reads, detailing the many ways Lemon Duck (now referred to as LemonDuck by Microsoft) can harm someone.

Notably, LemonDuck removes other attackers from a compromised device by getting rid of competing malware and preventing any new infections by patching the same vulnerabilities it used to gain access.".

Needless to say, Lemon Duck is among the more versatile threats out there.

If you want to learn more about the threat Lemon Duck (and Cat) pose to Windows 11, 10, and Linux systems, as well as how these systems are protected from said danger, check out Microsoft's post for all the technical details.